Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2201740614B11EFBAF3D149762E951A.roa
File: C2201740614B11EFBAF3D149762E951A.roa (raw, json)
Hash identifier: 8Tnu8nYT0v9Uq2MmNToEITMHXh8icFQF6/JpsB3DjLI=
Subject key identifier: C2:FB:45:DB:3D:76:F8:48:37:B6:E5:D4:28:45:12:AB:FB:A4:15:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E497
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2201740614B11EFBAF3D149762E951A.roa
Signing time: Fri 23 Aug 2024 12:32:28 +0000
ROA not before: Fri 23 Aug 2024 12:32:25 +0000
ROA not after: Tue 04 Mar 2025 12:32:25 +0000
asID: 3320
IP address blocks: 154.91.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58519 (0xe497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:32:25 2024 GMT
Not After : Mar 4 12:32:25 2025 GMT
Subject: CN=66c8815c-3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:4d:3c:42:2d:4f:33:74:0c:4c:e1:f6:2e:
db:b4:5e:8f:e8:30:1e:57:ac:fc:01:04:b5:e5:4d:
3a:27:29:59:51:98:21:e6:c1:86:98:90:fd:df:e8:
96:15:a6:cc:20:70:38:34:d6:fe:39:90:23:f8:ca:
7c:ec:c4:47:cf:e1:ab:56:76:a9:8e:d5:67:82:42:
f2:96:56:ea:9b:c6:4a:f9:6f:63:26:d4:14:f5:0b:
a9:9b:51:1d:09:73:67:47:47:2d:66:60:f8:7a:79:
6c:d0:33:8f:33:fc:4d:3b:e5:4e:96:1f:80:0b:19:
70:95:0a:03:d9:f0:99:16:18:4c:a6:4f:2f:f2:38:
79:aa:c9:5a:92:70:62:e5:d0:f2:29:16:fc:cb:65:
63:f2:df:78:52:35:d5:4d:8c:40:76:f3:88:5d:c7:
ca:96:2d:a0:71:ce:51:4c:90:d1:c9:a8:f7:37:d9:
bb:d5:08:91:71:6f:c8:30:ee:44:50:ee:b1:cd:8f:
3a:62:53:e5:96:48:0f:c6:6b:d6:cf:c5:ca:0b:13:
f8:e3:0a:06:4d:7b:52:68:51:33:26:0f:84:35:12:
08:46:be:3c:f0:e2:71:7f:a7:0d:17:02:dc:4d:b9:
d8:bb:4f:d9:35:94:9c:41:35:0e:00:8c:d2:f1:76:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:45:DB:3D:76:F8:48:37:B6:E5:D4:28:45:12:AB:FB:A4:15:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2201740614B11EFBAF3D149762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:7c:d2:70:3c:0f:21:a5:ae:9e:19:b1:c6:5c:47:4b:da:c2:
ea:82:a4:4b:38:81:8c:69:25:2e:c8:f5:08:22:68:16:c4:d0:
83:2c:df:ac:12:bc:b0:15:99:9b:c2:cc:73:70:04:82:52:f4:
70:c3:84:19:41:32:24:2a:2e:4b:c6:60:2a:1c:88:f3:ba:33:
28:1e:30:77:50:e8:6c:ed:b6:be:1c:3d:4e:b5:bc:87:b5:44:
11:f8:4a:11:ef:40:91:c2:6d:09:99:da:50:94:91:58:da:63:
27:b0:92:aa:f8:c3:31:7e:2d:51:16:51:a2:bc:5f:89:be:9d:
cc:77:e3:09:68:d0:28:65:59:c4:49:c3:97:3c:54:70:bf:e7:
74:df:38:70:5a:a1:dd:08:c3:20:55:ec:6e:55:b2:05:5c:06:
39:97:30:60:40:73:b5:19:f0:00:88:3a:5d:8f:e8:3e:a2:92:
47:54:34:0c:ff:f3:42:f8:83:8e:11:42:b4:f1:a6:54:92:02:
ff:eb:90:29:99:c4:75:a2:78:78:7b:87:37:36:53:30:02:f9:
e7:e3:b4:29:87:20:e3:c5:44:cb:d3:54:14:55:6c:1f:a7:2a:
24:d8:f9:76:0e:f2:a4:d7:cc:ae:c6:0e:55:05:e4:9f:04:b1:
85:a7:f9:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOSXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODIzMTIzMjI1WhcNMjUwMzA0MTIzMjI1WjAYMRYw
FAYDVQQDEw02NmM4ODE1Yy0zNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSBNPEItTzN0DEzh9i7btF6P6DAeV6z8AQS15U06JylZUZgh5sGGmJD9
3+iWFabMIHA4NNb+OZAj+Mp87MRHz+GrVnapjtVngkLyllbqm8ZK+W9jJtQU9Qup
m1EdCXNnR0ctZmD4enls0DOPM/xNO+VOlh+ACxlwlQoD2fCZFhhMpk8v8jh5qsla
knBi5dDyKRb8y2Vj8t94UjXVTYxAdvOIXcfKli2gcc5RTJDRyaj3N9m71QiRcW/I
MO5EUO6xzY86YlPllkgPxmvWz8XKCxP44woGTXtSaFEzJg+ENRIIRr488OJxf6cN
FwLcTbnYu0/ZNZScQTUOAIzS8XazywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFML7
Rds9dvhIN7bl1ChFEqv7pBUUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjIwMTc0MDYxNEIxMUVGQkFGM0QxNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmluUMA0GCSqGSIb3DQEB
CwUAA4IBAQCufNJwPA8hpa6eGbHGXEdL2sLqgqRLOIGMaSUuyPUIImgWxNCDLN+s
ErywFZmbwsxzcASCUvRww4QZQTIkKi5LxmAqHIjzujMoHjB3UOhs7ba+HD1OtbyH
tUQR+EoR70CRwm0JmdpQlJFY2mMnsJKq+MMxfi1RFlGivF+Jvp3Md+MJaNAoZVnE
ScOXPFRwv+d03zhwWqHdCMMgVexuVbIFXAY5lzBgQHO1GfAAiDpdj+g+opJHVDQM
//NC+IOOEUK08aZUkgL/65ApmcR1onh4e4c3NlMwAvnn47QphyDjxUTL01QUVWwf
pyok2Pl2DvKk18yuxg5VBeSfBLGFp/mP
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:34 2024 by rpki-client on console-ams.rpki-client.org